Matter N^^221-01 1001 Page 1 

Applican^^Wassimiliano Antonio Poletto et al. 
architwRre TO THWART DENIAL OF SERVICE 
ATTACKS 



s 




Matter No.: 1^1-011001 Page 2 of ^ 

Applicant($)^^wmiliano Antonio Poletto et al. 
ARCHITECflBTTO THWART DENIAL OF SERVICE 
ATTACKS 




Mattel^: 12221-011001 Pag^ 
Appli^A): Massimiliano Antonio Poletto et al. ■ 

arc™Rture to thwart denial of service ^ 



ATTACKS 




Matter No^221 -01 1 001 Page 4 

Applicant^^fcassimiliano Antonio Poletto et al. 
architSWre TO THWART DENIAL OF SERVICE 
ATTACKS 




C/3 

CX, 



Matter 2221 -01 1 001 Page 
Applica^BMassimiliano Antonio Poletto et al. 

architWture to thwart denial of service 

ATTACKS 



72 



Probe boots, 82 




r 


Client is installed to obtain an 
IP address, 84 


IP ad 




< 1 

f 

no 

dress 



Assigned, 86 





yes 


\ 


r 


Start NTP synchronization, 88 


\ 


r 


Configure client monitor 


config processes, 90 



FIG. 5 



Matter No.^221 -01 1 001 Page 6 of^t 

Applicant(^^kssimiliano Antonio Poletto et al. 
architeo^Pe TO THWART DENIAL OF SERVICE 
ATTACKS 



100 



X 



102, Sample 


packet 1 : N 




f 


104, collect and log source info. 




r 


106, Collect and log 
destination info. 




r 


108, Transmit collected 
and logged destination info. 



FIG. 6A 



110 

X 

1 12, Analyze collected source and 
destination info. 




FIG. 6B 



data center 24 



Matter^^l 2221 -01 1001 Page, 
Applic^^H Massimiliano Antonio Poletto et al. 
ARCH^BrTURE TO THWART DENIAL OF SERVICE 
ATTACKS 



130 



132, Statistic Collection 




r 


134a, Packet ratio process. 


l 


r 


134b, Repressor Traffic Process 


1 


r 


134c, TCP Handshake Analysis 




r 


134d, Layer 3-7 analysis 




r 


134e, Logging and Historical 
analysis 



J 



FIG. 7 



